BRIEFLeakhighP74
Mexico City licenses database published on DarkForums
Licencias / gobierno de la Ciudad de México
Detected6 November 2026 · 08:43 UTC
Reposts collapsed2
A DarkForums user ('alina') posted a database labelled 'Mexico City Licenses' in the Databases leaks section on 6 November 2026; the exact schema and record count are not confirmed. If these are official municipal licences, the dump would expose holders' names, addresses and licence numbers, enabling identity fraud and account takeover. It is a fresh Latin American government-adjacent leak and warrants verification before it circulates further.
CategoryLeak
Severityhigh
Priority score74
Detected6 November 2026 · 08:43 UTC
LeakPriority 36
Filtración de datos de Mercedes-Benz TurquíaA DarkForums user ('doommageddon') posted a document set titled 'Mercedez-Benz Turkey Data Leak' on 25 May 2026. The post is roughly five months old, so it is not a fresh alert, and the sample shows documents rather than a validated full database. It matters mainly as background for automotive-sector supplier and customer exposure, not as an immediate regional incident.LeakPriority 70
Venta de documento interno de SpaceX sobre la constelación StarshieldA seller on BreachForums (also mirrored on DarkForums) is offering an internal SpaceX document described as the Starshield constellation technical baseline and architecture. Starshield is SpaceX's government and defence satellite line, so the material is likely sensitive for military space programmes rather than a routine corporate leak. Defence and space-sector defenders should treat the document as compromised and review whether related programme data was exposed.LeakPriority 46
Filtración de datos de 140.000 usuarios de TourPay.appA BreachForums thread advertises a data breach affecting roughly 140,000 users of the travel payment service TourPay.app. The dataset reportedly covers customer accounts, which are valuable for payment fraud and credential stuffing against travel-sector partners. The post shows a multi-page thread with no clear recent date, so it should be triaged as relevant but not a fresh alert.LeakPriority 62
Base de datos de Salesianos Zaragoza a la venta en BreachForumsAn actor using the handle AndreGretry published a database belonging to Salesianos Zaragoza, a Catholic educational institution in Spain, on BreachForums (bf.st) on 6 November 2026. The exact record count is not visible in the snippet, but the release is framed as a full organizational database, so it likely contains personal data of students, families and staff. Spanish educational institutions hold minors' records, making this a sensitive privacy and regulatory exposure under GDPR/LOPDGDD.LeakPriority 55
Base de datos de un banco filtrada y compartida en el foro DarkNetArmyA forum user (SUB-ZER0) published a freebie labeled 'DATABASE OF A BANK' in the DarkNetArmy Premium Members section this week. The posting does not disclose the victim bank or its country, but bank customer databases carry high fraud and account-takeover risk, so the material should be validated. If a Latin American institution is behind it, records could include PII and account data usable for social engineering.LeakPriority 40
Publican 16,2 millones de credenciales robadas de todo el mundoA VIP-section post on DarkForums (mirrored on Spear) advertises a 16.2 million-line URL:login:password corpus dated 06/11/2026, assembled from global stealer logs. No victim organization is named, which limits direct attribution. The volume still supports large-scale credential stuffing against corporate VPNs, webmail and e-commerce.